1. About this notice
This notice explains how Pfundit collects, uses, shares, stores and protects personal data when you visit pfundit.com (the “Site”), write to us, request investor materials, or contact us as a prospective investor, lender, partner, adviser or supplier.
It does not cover job applicants, who should read our Applicant Privacy Notice, or cookies, which are covered by our Cookie Notice.
It is written to meet the requirements of India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and Singapore’s Personal Data Protection Act 2012 (PDPA). Most DPDP obligations come into force on 13 May 2027; until then the SPDI Rules apply in India. We already follow the DPDP standards in this notice.
Neither Pfundit company offers loans or any other financial product or service. We do not collect personal data from borrowers or loan applicants through the Site.
2. Who we are
- Pfundit Pte. Ltd.(UEN: 202544131H; registered address: 14B Stanley Street, Singapore 068733) operates the Site and handles most enquiries, including investor enquiries. It is an “organisation” responsible for your data under the PDPA.
- Pfundit Capital Private Limited(CIN: U64910KA2026FTC227353; registered office: Prestige Central, 36 Infantry Road, M.G. Road, Bengaluru 560001, India) handles enquiries about its business in India. For that data it is the “Data Fiduciary” under the DPDP Act and the “body corporate” under the SPDI Rules.
In this notice, “Pfundit”, “we” and “us” mean both companies. Each is responsible for its own compliance.
3. Personal data we collect
- Contact details: name, email address, phone number, organisation, job title and country.
- Your enquiry: what you write to us and any documents you choose to send.
- Investor information (only if you request investor materials): the type of investor you are (for example institutional or accredited investor), your jurisdiction, and the organisation you represent. If you later invest, identity and anti-money-laundering checks are covered by a separate notice given at that time.
- Relationship records: notes of meetings and calls, and correspondence.
- Technical data: IP address, device and browser information. See our Cookie Notice.
Where we get it from: you; the organisation you work for; people who introduce you to us; and public professional sources such as company websites and LinkedIn.
4. Why we use your data and our legal basis
We use your personal data to:
- respond to your enquiry and keep in touch about it;
- assess and manage potential investment, lending, partnership, advisory or supply relationships;
- confirm that investor materials go only to eligible investors, and record what we shared and when;
- keep the Site and our communications secure, and prevent fraud and impersonation; and
- comply with law and establish, exercise or defend legal claims.
We do not use your data for marketing unless you opt in, and you can opt out at any time.
India:we rely on the consent you give when you contact us, which you can withdraw at any time (section 10), and on the “legitimate uses” in section 7 of the DPDP Act, such as data you provide voluntarily for a specified purpose or processing required by law.
Singapore: we rely on your consent, including consent deemed given when you contact us voluntarily. Business contact information that you give us solely for business purposes is outside most PDPA data protection obligations, but we protect it to the same standard.
5. Who we share your data with
We share personal data only as needed for the purposes above, with:
- each other (Pfundit Pte. Ltd. and Pfundit Capital Private Limited);
- service providers who process data on our behalf, such as website hosting, email, customer relationship and virtual data-room providers, under written contracts;
- our professional advisers, such as lawyers, accountants and auditors;
- regulators, courts, law-enforcement or government authorities where required by law, including the Reserve Bank of India in connection with our registration process; and
- a prospective buyer, investor or merger partner, subject to confidentiality.
We do not sell your personal data.
6. International transfers
Your personal data may be transferred between Singapore and India, and to service providers in other countries.
- From India: the DPDP Act allows transfers outside India except to countries the Government of India restricts by notification. Under the SPDI Rules, we transfer data only to recipients that provide the same level of protection.
- From Singapore: we take steps to ensure that recipients outside Singapore protect your data to a standard comparable to the PDPA, for example through contractual clauses.
7. How long we keep your data
- Enquiries that do not lead to a relationship: 24 months after our last contact, then erased.
- Investors, lenders, partners, advisers and suppliers: for the relationship and afterwards for as long as law or legitimate business record-keeping requires.
We erase personal data once the purpose is served or you withdraw consent, unless the law requires us to keep it. We keep limited processing records, such as access logs, for at least one year.
8. How we protect your data
We use reasonable security safeguards designed with reference to IS/ISO/IEC 27001, including encryption, role-based access, access logging and vendor due diligence. If a personal data breach affects you, we will tell you without delay and report it as the law requires, including to the Data Protection Board of India, CERT-In and, for notifiable breaches, Singapore’s Personal Data Protection Commission (PDPC).
9. Your rights
Under Indian law
Access to a summary of your data and who we shared it with; correction, completion, updating and erasure; withdrawal of consent; grievance redressal through our Grievance Officer; nomination of another person to exercise your rights if you die or become incapacitated; and a complaint to the Data Protection Board of India once you have used our grievance process.
Under Singapore law
Access to your data and how it has been used or disclosed in the past year; correction of errors or omissions; withdrawal of consent on reasonable notice; and a complaint to the PDPC (pdpc.gov.sg).
We respond within 30 days, and in any event within the time allowed by law. We may ask you to verify your identity. For Singapore access requests we may charge a reasonable fee, which we will tell you in advance.
10. Withdrawing your consent
You can withdraw consent at any time by emailing privacy@pfundit.com. We will then stop processing your data and erase it, unless the law requires us to keep it. Withdrawal does not affect processing before you withdrew.
11. Children
The Site is not directed at anyone under 18, and we do not knowingly collect their personal data. If we learn that we have, we will erase it.
12. Contact us
India – Grievance Officer
[Name], Grievance Officer
Pfundit Capital Private Limited
Prestige Central, 36 Infantry Road, M.G. Road,
Bengaluru 560001, India
Email: grievance@pfundit.com · privacy@pfundit.com
Hours: Monday to Friday, 10:00–18:00 IST
Singapore – Data Protection Officer
[Name or designation], Data Protection Officer
Pfundit Pte. Ltd.
14B Stanley Street,
Singapore 068733
Email: dpo@pfundit.com
Regulators: Data Protection Board of India (through its digital platform); Personal Data Protection Commission, Singapore (pdpc.gov.sg).
13. Language and changes
You can ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by emailing privacy@pfundit.com. We may update this notice from time to time and will post the updated version on the Site with a new effective date.